Closed
Description
Expected Behavior
The Authentication is set on the SecurityContextHolder. Later, if you need to save SecurityContext
, SecurityContextRepository#saveContext
must be explicitly invoked.See the SecurityContextHolderFilter
class.
Current Behavior
The Authentication is set on the SecurityContextHolder. Later, the SecurityContextPersistenceFilter saves the SecurityContext to the HttpSession. See the SecurityContextPersistenceFilter class.